CVE-2021-3031

🗓️ 13 Jan 2021 18:10:13Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 134 Views

CVE-2021-3031: Padding bytes in Ethernet packets leak firewall memory into the packets, allowing collection of sensitive information. Affects PAN-OS 8.1<8.1.18, 9.0<9.0.12, 9.1<9.1.5

Reporter	Title	Published	Views	Family All 10
CNNVD	Multiple Palo Alto Networks Product Information Disclosure Vulnerabilities	13 Jan 202100:00	–	cnnvd
Cvelist	CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)	13 Jan 202118:10	–	cvelist
EUVD	EUVD-2021-26383	7 Oct 202500:30	–	euvd
NVD	CVE-2021-3031	13 Jan 202118:15	–	nvd
OpenVAS	ICMP 'Etherleak' Information Disclosure	23 Aug 202100:00	–	openvas
OSV	CVE-2021-3031	13 Jan 202118:15	–	osv
Palo Alto Networks	PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)	13 Jan 202117:00	–	paloalto
Tenable Nessus	Palo Alto Networks PAN-OS 8.1.x < 8.1.18 / 9.0.x < 9.0.12 / 9.1.x < 9.1.5 Vulnerability	13 Jan 202100:00	–	nessus
Prion	Information disclosure	13 Jan 202118:15	–	prion
Positive Technologies	PT-2021-18709	13 Jan 202100:00	–	ptsecurity

NVD

Vulners

Node

paloaltonetworks pan-osRange8.1.0–8.1.18

paloaltonetworks pan-osRange9.0.0–9.0.12

paloaltonetworks pan-osRange9.1.0–9.1.5

AND

paloaltonetworks pa-200Match-

paloaltonetworks pa-2020Match-

paloaltonetworks pa-2050Match-

paloaltonetworks pa-220Match-

paloaltonetworks pa-3020Match-

paloaltonetworks pa-3050Match-

paloaltonetworks pa-3060Match-

paloaltonetworks pa-3220Match-

paloaltonetworks pa-3250Match-

paloaltonetworks pa-3260Match-

paloaltonetworks pa-500Match-

paloaltonetworks pa-5200Match-

paloaltonetworks pa-800Match-

[
  {
    "platforms": [
      "PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200"
    ],
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "lessThan": "8.1.18",
        "status": "affected",
        "version": "8.1",
        "versionType": "custom"
      },
      {
        "lessThan": "9.0.12",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      },
      {
        "lessThan": "9.1.5",
        "status": "affected",
        "version": "9.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "10.0.*"
      },
      {
        "lessThan": "8.1*",
        "status": "unaffected",
        "version": "8.1.18",
        "versionType": "custom"
      },
      {
        "lessThan": "9.0*",
        "status": "unaffected",
        "version": "9.0.12",
        "versionType": "custom"
      },
      {
        "lessThan": "9.1*",
        "status": "unaffected",
        "version": "9.1.5",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2021-3031

17 Jun 2026 04:04Current

4.7Medium risk

Vulners AI Score4.7

CVSS 23.3

CVSS 3.14.3

EPSS0.00538